Week 6, 2018
5–11 February 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2018-6789 An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. Thi…EPSS 82%
-
Critical 9.8
CVE-2018-0125 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote …EPSS 55%
- Critical 9.8 EPSS 38%
-
Critical 9.8
CVE-2017-15095 jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code executionEPSS 8.4%
- Critical 9.8 EPSS 4.7%
- Critical 9.8 EPSS 3.3%
- Critical 9.8 EPSS 2.3%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2018-6892 An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on por…EPSS 93%
-
High 7.8
CVE-2018-4878 A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK…EPSS 90%
-
Unscored
CVE-2018-0127 A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticate…EPSS 78%
-
Unscored
CVE-2018-1000049 Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if…EPSS 77%
-
Unscored
CVE-2018-6389 In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (fro…EPSS 73%
-
Unscored
CVE-2018-3604 GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary c…EPSS 68%
-
Unscored
CVE-2018-1161 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not requ…EPSS 67%
-
Unscored
CVE-2018-6605 SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, o…EPSS 58%
Advisories
- SUSE / openSUSE Security Updates 18
- Debian Security (DSA / DLA) 164 critical
- Ubuntu Security Notices (USN) 7
- Amazon Linux Security Center (ALAS) 5
- CISA ICS & IT advisories 21 critical
- BSI CERT-Bund (WID) 1
- Oracle Linux Security Advisories (ELSA) 1
- ICSMA-18-037-02 GE Medical Devices Vulnerability 23 CVEs
- DLA-1273-1 simplesamlphp - security update 3 CVEs
- DSA-4110-1 exim4 - security update 1 CVEs
- DLA-1274-1 exim4 - security update 1 CVEs
- DSA-4107-1 django-anymail - security update 1 CVEs